CVE-2026-34045

Отчет

Podman Desktop is vulnerable to denial-of-service and information disclosure. An unauthenticated HTTP server, lacking proper connection limits, allows remote attackers to trigger application crashes or host freezes. Additionally, verbose error responses may expose sensitive internal paths and system details. This affects Red Hat Enterprise Linux versions shipping Podman Desktop. Red Hat Product Security has rated this vulnerability as having the severity of Important as it allows remote unauthenticated users to compromise system availability (A:H), additionally the leak of sensitive path information leakage in error message may allow the attacker to gain knowledge about the environment on which podman-desktop is running.

Меры по смягчению последствий

Restrict network access to the system running Podman Desktop. Configure a firewall to block incoming connections to the ports used by Podman Desktop's unauthenticated HTTP server from untrusted networks. For example, using firewall-cmd on Red Hat Enterprise Linux:

Replace <PORT_NUMBER> with the actual port used by Podman Desktop. This mitigation limits the attack surface and prevents remote exploitation, but may impact the ability to remotely manage or interact with Podman Desktop.